[Oisf-users] Can't apply BPF from file when PF_RING enabled? 2.1beta3

[Brian Keefer]

On Feb 10, 2015, at 7:57 AM, Victor Julien <lists at inliniac.net> wrote:

> > Set PF_RING bpf filter "/etc/suricata/bpf.filter" failed. 7/2/2015
> > -- 18:24:48 - <Info> - Set PF_RING bpf filter
> > "/etc/suricata/bpf.filter" failed.
> 
> It looks like it considers the string "/etc/suricata/bpf.filter" to be
> filter instead of the contents of the file.
> 
> Are you sure you're loading the file with "-F
> /etc/suricata/bpf.filter"? Omitting the "-F" could explain the above.
> 
> Cheers,
> Victor

Hello Victor,

I misunderstood the YAML parameter and thought it could be overloaded. Reading the BPF file with -F works fine, thanks.

--
chort

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20150210/ce7cde99/attachment.sig>